🚨 SlowMist TI Alert 🚨 A supply chain attack has compromised Ethersphere’s npm package `@ethersphere/bee-js@13.3.0` and Swarm Desktop v0.56.2. Attackers abused compromised GitHub accounts and legitimate release pipelines to distribute malicious code across Windows, macOS, and Linux. The malicious code retrieves and executes remote JavaScript from `api[.]frameworkmetrics[.]xyz`. Its later-stage backdoor uses the Ethereum smart contract `0xf8a900Db50b3331be6B768bA460BB59f3E40C344` as a decentralized command-and-control (C2) configuration store, allowing attackers to dynamically update C2 addresses. The same contract was previously linked to the SleepyDuck / EtherDuck malware campaign targeting malicious Open VSX extensions. Potential risks include wallet credential theft, private key exfiltration, persistent backdoor deployment, and unauthorized remote access. Users should remove `@ethersphere/bee-js@13.3.0`, pin version 13.2.0, and upgrade Swarm Desktop to the clean v0.56.3 release. Investigate affected systems, rotate potentially exposed credentials, and monitor suspicious connections to the malicious infrastructure. You can also visit to check for free whether the npm packages, pip packages, domains, or IPs you use are safe. As always, stay vigilant! Reference:

🚨 SlowMist TI Alert 🚨 💸 @ankr Loss: ~$304.5k 🔍 Root Cause: The attacker submitted five forged cross-chain receipts referencing the same legitimate Optimism transaction, altering the recipient, token, and withdrawal amounts. All five receipts carried valid signatures from the bridge's trusted consensus signer, allowing withdraw() to release assets without independently verifying the receipts against the actual source-chain events. ⚠️ The origin of the unauthorized signatures remains under investigation. Signer compromise has not been confirmed. 📌 Attacker (Tx Sender): 0x9A88Dd45AE846A979705c9cFdfD0f229e592D703 📌 Recipient: 0x119D250b82C1cf5345dF5912EFb4B1a4107a1Aa6 📌 Vulnerable Contract: 0xc437DF90B37C1dB6657339E31BfE54627f0e7181 Powered by Attack Tx: Reused Source Tx:

Why pay gas fees when you don’t have to? 💸 Gas-Free Transfers — Send stablecoins across multiple networks at zero cost. 🔄 Gas-Free Swaps — Swap tokens with zero gas fees. More Chains. Zero Gas Fees. More Freedom.